BodyProof

BodyProof Privacy Policy

Effective date: August 14, 2026

BodyProof values users' personal information and complies with applicable laws, including the Personal Information Protection Act of Korea.

1. Personal data we process

CategoryItemsPurposeRetention
Sign-upEmail address or Kakao account identifierAccount identification, community useUntil account deletion
Service useBody photos, silhouette data, measurements (weight, waist, etc.), workout logsRecording, comparison, trendsStored on device/cloud (user's choice)
Community (optional)Profile nickname, posts, posted photos, cheers and reactionsFeeds, challenges, rankingsServer (Firebase), until account deletion
Automatic collectionApp version, device model (for error diagnostics)Stability improvements90 days

2. Where data is stored and processed

  • Local-first storage: Photos and measurements are stored by default only in the secure storage (SwiftData) on your device.
  • iCloud backup (optional): Only if you enable Settings → iCloud Backup, data is encrypted and backed up to your private Apple CloudKit container. The Operator cannot access this data.
  • When using the community: Account information and posted content are stored in Google Firebase (US region). Firebase complies with Google Cloud security certifications (ISO 27001, SOC 2, etc.).
  • If you do not use the community, no data is sent to any server.

3. Third-party provision and processors

  • The Operator does not provide users' personal information to third parties in principle.
  • Data processors: Google Firebase (account and community data storage), Apple (sign-in, iCloud backup, and payment processing for subscriptions if introduced).

4. Retention and deletion

  • Retention period: until account deletion. Upon account deletion, account and posted data on the server are deleted immediately.
  • iCloud backup data can be deleted by you in your iCloud storage.
  • Local data on the device is deleted together when the app is deleted.

5. Your rights

You may exercise the following rights at any time.

  • Delete your account and server data via Settings → Account → Delete Account
  • Delete and restore individual photos and records in the in-app Trash
  • Request access, correction, or deletion by email (manager@x-ti.org)

6. Children's privacy

BodyProof is not directed at children under 14 and does not collect personal information from children under 14.

7. Protection measures

  • Photo originals are stored separately as originals, thumbnails, and comparison renders, isolated in the local media library.
  • Authentication tokens are kept in the device's secure storage and refreshed periodically.
  • Report and block features let you control exposure between users.

8. Privacy officer and contact

For reports or consultations about privacy infringement, you may also contact the following organizations.

  • Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
  • Korea Internet & Security Agency Privacy Center: 118 (privacy.kisa.or.kr)
  • Cyber Investigation Bureau, Korean National Police Agency: 182 (ecrm.police.go.kr)

9. Notice of changes

If this Privacy Policy changes, notice will be given in the app from at least 7 days before the effective date.

Contact